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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i k e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

Please AMEND claim 10 in accordance with the following: 

1 . (PREVIOUSLY PRESENTED) A security information mediation apparatus 
connected between a first terminal at an information contributor and a second terminal at an 
information recipient, the security information mediation apparatus comprising: 

a first receiving unit which receives security information from the first terminal, the 
security information comprising information regarding a design error or bug in a computer 
program; 

a first registering unit which registers the security information in a first database; 

a first transfer unit which receives the security information from the first registering unit 
and transfers the security information registered by the first registering unit to the second 
terminal for the information recipient to judge usefulness of the security information; 

a second receiving unit which receives at least reply information including the usefulness 
of the security information corresponding to the security information from the second terminal; 

a second registering unit which registers at least the reply information in a second 
database; and 

a second transfer unit which receives at least the reply information from the second 
registering unit and transfers the reply information to the first terminal, wherein 

when the information recipient finds that the security information has usefulness, the 
second receiving unit receives payment information on an information presentation fee to be 
paid to the information contributor from the second terminal, the second registering unit registers 
the payment information together with the reply information, and the second transfer unit 
transfers the payment information together with the reply information to the first terminal. 

2. (PREVIOUSLY PRESENTED) The security information mediation apparatus 
according to claim 1 , wherein said first registering unit refers to the registered security 
information in the first database, and registers the security information from the first terminal in 
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the first database only if the security information from the first terminal is new, and said first 
transfer unit transfers the security information from the first terminal to the second terminal only 
if the security information from the first terminal is new, 

3. (PREVIOUSLY PRESENTED) The security information mediation apparatus 
according to claim 1, further comprising: 

a classification information registering unit which registers classification information of 

the security information desired by the information recipient; and 

a classification unit which classifies the security information from the first terminal, 
wherein said first transfer unit transfers the security information to the second terminal 

only if the classification information and classification result of said classification unit coincide. 

4. (PREVIOUSLY PRESENTED) The security information mediation apparatus 
according to claim 1, wherein the second receiving unit receives invalidity information showing 
invalidity of the security information from the second terminal, and said second transfer unit 
transfers the invalidity information to the first terminal. 

5. (PREVIOUSLY PRESENTED) The security information mediation apparatus 
according to claim 1 , wherein the second receiving unit receives, from the second terminal, 
correction information as a measure for the security information of which usefulness is shown 
and said second transfer unit transfers the correction information to the first terminal. 

6. (PREVIOUSLY PRESENTED) The security information mediation apparatus 
according to claim 1 , further comprising a disclosing unit which discloses the security information 
registered by the first registering unit. 

7. (PREVIOUSLY PRESENTED) The security information mediation apparatus 
according to claim 5, further comprising a disclosing unit which discloses the security information 
registered by the first registering unit and the correction information. 

8. (PREVIOUSLY PRESENTED) A security information mediation method, 
comprising: 
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receiving security information from a first terminal at an information contributor, the 
security information comprising information regarding a design error or bug in a computer 
program; 

first registering the security information in a first database; 

receiving the security information registered at the first registering and transferring the 
security information registered at the first registering to a second terminal at an information 
recipient forjudging usefulness of the security information; 

receiving at least reply information including the usefulness of the security information 
corresponding to the security information from the second terminal; 

registering at least the reply information in a second database; and 

receiving at least the reply information and transferring the reply information to the first 
terminal, wherein 

when the information recipient finds that the security information has usefulness, the 
receiving of at least the reply information includes receiving payment information on an 
information presentation fee to be paid to the information contributor from the second terminal, 
the registering of at least the reply information includes registering the payment information 
together with the reply information, and the receiving at least the reply information and 
transferring includes transferring the payment information together with the reply information to 
the first terminal. 

9. (PREVIOUSLY PRESENTED) The security information mediation method 
according to claim 8, wherein the registering the security information includes referring to the 
registered security information in the first database, and registering the security information from 
the first terminal only if the security information from the first terminal is new, and the receiving 
the security information registered at the first registering step and transferring includes 
transferring the security information from the first terminal to the second terminal only if the 
security information from the first terminal is new. 

10. (CURRENTLY AMENDED) The security information mediation method according 
to claim 8, further comprising: 

registering classification information of the security information desired by the information 
recipient; and 

classifying the security information from the first terminal. 
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wherein the receiving the security information registered at the first registering-step and 
transferring includes transferring the security information to the second terminal only if the 
classification information and classification result at the classifying coincide. 

1 1 . (PREVIOUSLY PRESENTED) The security information mediation method 
according to claim 8, wherein the receiving at least reply information includes receiving invalidity 
information showing invalidity of the security information from the second terminal, and the 
receiving at least the reply information and transferring transfers the invalidity information to the 
first terminal. 

12. (PREVIOUSLY PRESENTED) The security information mediation method 
according to claim 8, wherein the receiving at least reply information includes receiving from the 
second terminal, correction information as a measure for the security information of which 
usefulness is shown and the receiving at least the reply information and transferring includes 
transferring the correction information to the first terminal. 

13. (PREVIOUSLY PRESENTED) The security information mediation method 
according to claim 8, further comprising disclosing the security information registered at the first 
registering step. 

14. (PREVIOUSLY PRESENTED) The security information mediation method 
according to claim 12, further comprising disclosing the security information registered at the first 
registering step and the correction information. 

1 5. (PREVIOUSLY PRESENTED) A computer readable medium for storing 
instructions, which when executed by a computer, causes the computer to perform: 

first receiving security information from a first terminal at an information contributor, the 
security information comprising information regarding a design error or bug in a computer 
program; 

registering the security information in a first database; 

receiving the security information registered at the first registering and transferring the 
security information registered at the first registering to a second terminal at an information 
recipient forjudging usefulness of the security information; 
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receiving at least reply information including the usefulness of the security information 

corresponding to the security information from the second terminal; 

registering at least the reply information in a second database; and 

receiving at least the reply information registered at the second registering step and 

transferring the reply information registered at the second registering step to the first terminal, 

wherein 

when the information recipient finds that the security information has usefulness, the 
receiving at least reply information includes receiving payment information on an information 
presentation fee to be paid to the information contributor from the second terminal, the 
registering at least the reply information includes registering the payment information together 
with the reply information, and the receiving at least the reply information includes transferring 
the payment information together with the reply information to the first terminal. 

16. (PREVIOUSLY PRESENTED) A method of collecting information over a network, 
comprising: 

determining that information received from a verified user regarding a design error or bug 
in a computer program is valuable; and 

rewarding the user for submitting the information. 

17. (PREVIOUSLY PRESENTED) A method of collecting information over a network, 
comprising: 

determining that information received from a verified user regarding a security flaw in a 
product is valuable; and 

rewarding the user for submitting the information. 
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